Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier: jU/Y8eFfkEOTp6gyE9Ui+Q1WCr+ZodU19eshI+cTHdU=
Subject key identifier: 1F:88:09:20:05:B7:84:B5:46:0B:65:E7:A6:4F:EF:10:53:53:72:2D
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial: 0196B96CDA68C016443EF3F536ABC0617597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number: 1081
Signing time: Sat 10 May 2025 09:00:40 +0000
Manifest this update: Sat 10 May 2025 09:00:40 +0000
Manifest next update: Sun 11 May 2025 09:00:40 +0000
Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: VFBMnF2tcMtv/D+1Jm2RANPy3ZKHgzP6vTE5rKuzBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:da:68:c0:16:44:3e:f3:f5:36:ab:c0:61:75:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Validity
Not Before: May 10 09:00:40 2025 GMT
Not After : May 11 09:00:40 2025 GMT
Subject: CN=1f88092005b784b5460b65e7a64fef105353722d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:3c:ef:ba:09:01:86:64:7a:14:54:46:b1:
ec:79:4b:18:b9:ec:df:fe:00:3f:f9:e1:10:7d:c6:
c7:66:45:5f:e7:cc:eb:af:a7:e7:92:c9:89:87:7a:
98:a1:84:29:28:7c:ef:4a:29:79:b1:b2:98:0e:6c:
08:32:56:bf:6c:a9:15:e3:85:7b:36:5b:69:b4:fc:
f5:b4:f2:8c:48:3f:f4:e2:e5:54:55:ab:2a:aa:b1:
90:a8:7d:38:49:2f:04:ff:88:44:57:fc:88:22:24:
9a:0b:8a:82:7f:82:73:73:59:fd:4a:22:02:c6:3b:
bd:ac:c3:84:c0:2c:29:8f:f6:8b:3f:66:eb:ed:2f:
5e:83:e8:e0:8f:38:63:8c:5b:c7:07:ca:2a:8c:5e:
cf:74:18:86:54:92:ea:d5:33:a8:93:3d:ac:89:ff:
79:0b:1a:81:d5:12:7c:9d:97:ad:42:4b:6e:30:57:
53:d4:7e:23:64:e3:f6:c6:45:66:09:66:cd:92:88:
f9:9a:1e:9a:e5:e9:66:a9:a1:3b:e0:d8:42:cc:d8:
80:0c:2a:0b:50:ad:2c:7f:6d:6a:71:bc:a6:55:d7:
14:1b:d9:de:29:16:e6:07:d3:4f:83:70:c6:66:c2:
e9:aa:f3:2c:63:00:f1:ff:92:a2:71:78:d6:56:1d:
c7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:88:09:20:05:B7:84:B5:46:0B:65:E7:A6:4F:EF:10:53:53:72:2D
X509v3 Authority Key Identifier:
keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:27:01:6d:a8:49:5f:94:64:c6:13:c3:cf:7a:4a:09:8f:cd:
97:9d:66:25:90:5f:c1:48:2e:d7:4f:27:d3:9e:ad:96:07:66:
a9:75:71:dd:65:d7:14:f8:a7:d4:dc:1a:83:15:01:0b:e1:e5:
14:a6:71:be:f2:87:9e:68:68:0b:77:a0:5c:78:34:6d:70:52:
9e:8c:97:fb:c5:76:c8:75:7f:dd:77:7a:76:d2:4e:42:d8:02:
34:82:0a:c3:ae:0f:19:c0:27:36:c7:2a:f3:87:20:23:42:57:
e1:c4:3a:42:13:4d:d7:bc:20:89:83:02:b8:e8:d5:4b:6a:63:
2c:84:8f:7e:7d:5a:43:1f:cd:86:9b:00:47:19:d5:33:a7:c8:
0e:d5:f3:48:8f:0a:49:22:2c:0f:ab:cb:ce:40:58:b4:d1:03:
86:41:10:6c:ea:4a:c3:0e:10:03:1b:0f:18:1c:9b:55:ae:38:
73:69:f1:d4:81:c7:93:75:e7:f1:a9:0c:ab:cb:50:79:2b:1d:
c5:64:bb:c2:56:3f:ab:e5:69:3c:71:48:5d:43:a7:a5:32:08:
76:07:17:89:e1:3c:06:87:0d:62:ca:6c:23:59:25:c9:0e:97:
2d:c4:93:d4:07:b4:2b:ab:9c:89:46:9a:e7:0f:75:f9:9d:68:
d7:e5:f6:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5bNpowBZEPvP1NqvAYXWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ODNkNjhjNDBiM2RiYzI5YTdkNDc3Mjc5MWE1MzhjM2Vl
ZTIwMzIwHhcNMjUwNTEwMDkwMDQwWhcNMjUwNTExMDkwMDQwWjAzMTEwLwYDVQQD
EygxZjg4MDkyMDA1Yjc4NGI1NDYwYjY1ZTdhNjRmZWYxMDUzNTM3MjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF8877oJAYZkehRURrHseUsYuezf
/gA/+eEQfcbHZkVf58zrr6fnksmJh3qYoYQpKHzvSil5sbKYDmwIMla/bKkV44V7
NltptPz1tPKMSD/04uVUVasqqrGQqH04SS8E/4hEV/yIIiSaC4qCf4Jzc1n9SiIC
xju9rMOEwCwpj/aLP2br7S9eg+jgjzhjjFvHB8oqjF7PdBiGVJLq1TOokz2sif95
CxqB1RJ8nZetQktuMFdT1H4jZOP2xkVmCWbNkoj5mh6a5elmqaE74NhCzNiADCoL
UK0sf21qcbymVdcUG9neKRbmB9NPg3DGZsLpqvMsYwDx/5KicXjWVh3H/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+ICSAFt4S1Rgtl56ZP7xBTU3ItMB8GA1UdIwQY
MBaAFGSD1oxAs9vCmn1HcnkaU4w+7iAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEt
ZGQ0YWZmMzYwYTExLzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEtZGQ0YWZmMzYwYTEx
LzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVicBbahJ
X5RkxhPDz3pKCY/Nl51mJZBfwUgu108n056tlgdmqXVx3WXXFPin1NwagxUBC+Hl
FKZxvvKHnmhoC3egXHg0bXBSnoyX+8V2yHV/3Xd6dtJOQtgCNIIKw64PGcAnNscq
84cgI0JX4cQ6QhNN17wgiYMCuOjVS2pjLISPfn1aQx/NhpsARxnVM6fIDtXzSI8K
SSIsD6vLzkBYtNEDhkEQbOpKww4QAxsPGBybVa44c2nx1IHHk3Xn8akMq8tQeSsd
xWS7wlY/q+VpPHFIXUOnpTIIdgcXieE8BocNYspsI1klyQ6XLcST1Ae0K6uciUaa
5w91+Z1o1+X29g==
-----END CERTIFICATE-----
Generated at Sat May 10 17:10:09 2025 by rpki-client